Your data
Where your data lives.
A plain answer, before you have to ask. Your data sits in a database of your own, walled off from every other customer. Orca reads it to work for you, never to train anything, and you can take it with you whenever you like.
The short version
- A database of your own, hosted by us in London and walled off from every other customer.
- Never used to train AI models, never sold, never shared.
- Your mail stays in Outlook or Gmail, and Orca never marks it read.
- Sign in with Microsoft or Google. No passwords stored.
- Nothing sent without your approval, apart from the switches listed below that you turn on yourself.
- Export any time. When you leave, we delete it.
A database of your own
Every customer gets their own database: a separate Supabase project in London (eu-west-2), used only for you or, on Orca for Teams, only for your team. It is not shared with any other customer, and nothing in it is visible to anyone else’s Orca.
It is encrypted at rest and every connection to it is encrypted in transit. We can reach it to run and support the service, and anyone at OMG Center who can is bound by a duty of confidentiality.
Your mail stays where it is
Orca reads your mail and diary from Outlook or Gmail. Your mailbox stays with Microsoft or Google under your own agreement with them, and Orca never marks a message read: what you have not opened still looks unopened.
Your database keeps what Orca needs to work for you, such as who wrote, what was agreed, the briefs it prepared and the drafts waiting for your yes.
Signing in
You connect each mailbox with Microsoft or Google’s own sign-in. Orca never sees or stores your password. The access that sign-in grants is kept encrypted: in your computer’s keychain, and, for the work that carries on while your laptop is closed, in an encrypted vault inside your own database. You can withdraw it at any time from your Microsoft or Google account settings.
Which services process what
Orca uses a small number of services to do its work. Each sees only what its job needs.
| Service | What it does | What it sees |
|---|---|---|
| Anthropic (Claude) | The AI that writes the briefs, drafts and summaries | The text of each request, such as the thread being answered. Under Anthropic’s commercial terms, data sent through the API is not used to train their models. |
| Recall.ai | The meeting notetaker that joins your calls | The audio and video of the meetings it records |
| Deepgram | Turns recordings made on your laptop into transcripts | The audio of those recordings |
| Voyage AI | Makes your notes searchable by meaning | The text of your notes, which it turns into search data |
| Exa | Web research for meeting briefs | Search terms such as a person’s name and company, not your mail |
| Supabase | Hosts your database in London | What Orca stores for you |
| Keygen | Checks your licence | Your licence key and device activations only |
Phone alerts by Pushover, Telegram or WhatsApp carry the text of each alert, and only if you switch them on. Microsoft and Google are not our sub-processors: your mail and calendar stay with them under your own agreement.
Never used to train models
Your data is never used to train AI models, ours or anyone else’s. We do not sell it, and we do not share it with other customers.
Nothing sent without your approval
Every reply, follow-up, post and invite Orca prepares waits for your yes. The exceptions are switches you turn on yourself, and you should know them before you start:
- Out-of-office mode. When you switch it on, Orca answers the people you actually correspond with while you are away, and never commits you to anything.
- LinkedIn auto-reply. Off by default. If you turn it on, Orca sends replies to LinkedIn messages in the categories you tick.
- Your booking page. When someone books a time on it, Orca sends them the confirmation and the invite, because they asked for it.
Export, and leaving
Ask for an export at any time and we will send you everything Orca holds for you in a structured format.
When your licence ends, we export your data to you if you want it and then delete your database within 30 days, as section 9 of our data processing agreement sets out. Short-lived backups expire on their own cycle. Your mail and calendar stay with Microsoft or Google, and you can withdraw Orca’s access there. Ask us for the detail at any point.
The paperwork
- The data protection impact assessment (DPIA) is done, following ICO guidance.
- We provide a data processing agreement before onboarding.
- OMG Center Ltd is registered with the ICO.
- The detail is in the data map, the information security page and the data protection policy.
Who we are
Orca is made by OMG Center Ltd, a company registered in England and Wales, company number 14169551, in London. Highly Commended, Stationers’ Innovation Excellence Awards 2026.
Questions about your data go to the person who built the system: chris@simmance.ai.
Ask anything about your data.
Thirty minutes, with the person who built it. Or get started: £149 a month, cancel any time.
We’ll be in touch within one working day with your licence and next steps.